topic Re: Prisma Access Internet Break-out in prisma / aggregate bandwith. in Prisma Access Discussions

Prisma Access Internet Break-out in prisma / aggregate bandwith.

zGomez — Wed, 17 May 2023 14:43:56 GMT

Hi,

My first question regarding the aggregate bandwith feature.

For example on computer location i will assing 100 Mbit of traffic.

At the Guaranteed bandwith ratio I will put in 100% and reserved for Guaranteed bandwidth i also put in 100.

So if i have 5 sites they will all receive a guaranteed 20 Mbps.

Suppose all sites together are only consuming 20 Mbps will they still be able to peak to 100Mbps and use what others have not consumed?

My QOS profiles are still on Mbps due to migration and should be migrated to percentage.

When I want those 5 sites to break out to the internet on Prisma Access computer location how is this reflected in the QOS.

Or does the QOS not apply to internet traffic only between remote sites?

What is the internet break out speed on a computer location?

When I run a speedtest to the internet with above settings I can reach around 170 Mbps down and 20 Mbps up this doesn't seem to match the conigured QOS. (when i turn to overal bandwith to 50 Mbps for example i can still reach the same speed to internet).

Also when running iperf between a server in a remote location and a server in our service connection i doesn't seem to reflect the settings.

Any help on explaining this would be appreciated.

Re: Prisma Access Internet Break-out in prisma / aggregate bandwith.

reaper — Tue, 23 May 2023 16:37:33 GMT

Any guarantees can be surpassed whenever 'excess' is available from other sites not using their capacity

The RN-SPN "internet speed" is physically much higher than the capacity you assign to the node, and will generally be able to surpass your allocation by 10% according to the documentation but in reality i've also seen higher results. I'd not 'trust' on the bonus to go unnoticed if you start bursting all the time, a sales person might come knocking to sell you more capacity 😉

QoS is applied on egress ('from' the RN), but you need to create a QoS profile to define classes and then define what those classes include via policy

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/configure-quality-of-service-in-prisma-access/configure-quality-of-service-for-mobile-users-and-remote-networks#id3dbc4e78-ad07-4063-a552-09131e7d7b42

Re: Prisma Access Internet Break-out in prisma / aggregate bandwith.

zGomez — Mon, 10 Jul 2023 12:14:47 GMT

Hi Tom,

I forgot to reply to your mail , this is also the feedback I received from our Palo representative.

For the compute locations indeed the RN-SPN node can handle op to 500 Mbps and the speed you define in panorama is not a hard limit just something for sales and to determine how many RN-SPN nodes you need.

I will mark your reply as solution.